@uvl000/claude-trace 3.0.13-workflowexp.1

package/dist/intercept/mitm-cert.js

@@ -0,0 +1,259 @@
+"use strict";
+/**
+ * @file mitm-cert.ts
+ * @description Local CA and leaf certificate management for HTTPS MITM proxying.
+ *
+ * vibe-coding-proxy only decrypts HTTPS traffic for explicitly allowlisted model
+ * API hosts. This module creates a reusable local certificate authority and
+ * caches per-host leaf certificates signed by that CA. It never installs the CA
+ * into the system trust store; users must opt in by trusting the printed CA path.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MitmCertificateAuthority = void 0;
+exports.defaultCaDir = defaultCaDir;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const node_forge_1 = __importDefault(require("node-forge"));
+/**
+ * Creates, loads, and reuses local MITM certificates for allowlisted hosts.
+ */
+class MitmCertificateAuthority {
+    /**
+     * @param caDir - Directory used to persist CA and cached leaf certificates.
+     */
+    constructor(caDir = defaultCaDir()) {
+        this.authority = null;
+        this.caDir = caDir;
+        this.caKeyPath = path.join(caDir, "ca.key.pem");
+        this.caCertPath = path.join(caDir, "ca.crt");
+    }
+    /**
+     * Ensure the local CA exists and return its user-facing paths.
+     * @returns CA certificate path and PEM content.
+     */
+    ensureAuthority() {
+        const authority = this.loadOrCreateAuthority();
+        return {
+            certPath: this.caCertPath,
+            keyPath: this.caKeyPath,
+            certPem: authority.certPem,
+        };
+    }
+    /**
+     * Return a cached or newly generated leaf certificate for `hostname`.
+     * @param hostname - DNS name from the CONNECT target.
+     */
+    getCertificateForHost(hostname) {
+        const normalizedHost = normalizeCertHost(hostname);
+        const certPath = path.join(this.caDir, `${safeFileName(normalizedHost)}.crt.pem`);
+        const keyPath = path.join(this.caDir, `${safeFileName(normalizedHost)}.key.pem`);
+        if (fs.existsSync(certPath) && fs.existsSync(keyPath)) {
+            const cachedCertPem = fs.readFileSync(certPath, "utf-8");
+            if (isLeafCertificateUsable(cachedCertPem)) {
+                return {
+                    cert: cachedCertPem,
+                    key: fs.readFileSync(keyPath, "utf-8"),
+                };
+            }
+            fs.rmSync(certPath, { force: true });
+            fs.rmSync(keyPath, { force: true });
+        }
+        const authority = this.loadOrCreateAuthority();
+        const keys = node_forge_1.default.pki.rsa.generateKeyPair(2048);
+        const cert = node_forge_1.default.pki.createCertificate();
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = crypto.randomBytes(16).toString("hex");
+        cert.validity.notBefore = new Date(Date.now() - 60000);
+        cert.validity.notAfter = new Date();
+        cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 1);
+        const attrs = [
+            { name: "commonName", value: normalizedHost },
+            { name: "organizationName", value: "vibe-coding-proxy" },
+        ];
+        cert.setSubject(attrs);
+        cert.setIssuer(authority.cert.subject.attributes);
+        cert.setExtensions([
+            { name: "basicConstraints", cA: false, critical: true },
+            { name: "keyUsage", digitalSignature: true, keyEncipherment: true, critical: true },
+            { name: "extKeyUsage", serverAuth: true },
+            {
+                name: "subjectAltName",
+                altNames: buildSubjectAltNames(normalizedHost),
+            },
+            { name: "subjectKeyIdentifier" },
+            {
+                name: "authorityKeyIdentifier",
+                keyIdentifier: authority.cert.generateSubjectKeyIdentifier().getBytes(),
+            },
+        ]);
+        cert.sign(authority.key, node_forge_1.default.md.sha256.create());
+        const pair = {
+            key: node_forge_1.default.pki.privateKeyToPem(keys.privateKey),
+            cert: node_forge_1.default.pki.certificateToPem(cert),
+        };
+        fs.writeFileSync(keyPath, pair.key, { mode: 0o600 });
+        fs.writeFileSync(certPath, pair.cert);
+        return pair;
+    }
+    /** Load persisted CA material or create it on first use. */
+    loadOrCreateAuthority() {
+        if (this.authority) {
+            return this.authority;
+        }
+        fs.mkdirSync(this.caDir, { recursive: true });
+        if (fs.existsSync(this.caKeyPath) && fs.existsSync(this.caCertPath)) {
+            const keyPem = fs.readFileSync(this.caKeyPath, "utf-8");
+            const certPem = fs.readFileSync(this.caCertPath, "utf-8");
+            if (isAuthorityCertificateUsable(certPem)) {
+                this.authority = {
+                    key: node_forge_1.default.pki.privateKeyFromPem(keyPem),
+                    cert: node_forge_1.default.pki.certificateFromPem(certPem),
+                    certPem,
+                };
+                return this.authority;
+            }
+            fs.rmSync(this.caKeyPath, { force: true });
+            fs.rmSync(this.caCertPath, { force: true });
+            removeCachedLeafCertificates(this.caDir);
+        }
+        const keys = node_forge_1.default.pki.rsa.generateKeyPair(2048);
+        const cert = node_forge_1.default.pki.createCertificate();
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = crypto.randomBytes(16).toString("hex");
+        cert.validity.notBefore = new Date(Date.now() - 60000);
+        cert.validity.notAfter = new Date();
+        cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
+        const attrs = [
+            { name: "commonName", value: "vibe-coding-proxy Local CA" },
+            { name: "organizationName", value: "vibe-coding-proxy" },
+        ];
+        cert.setSubject(attrs);
+        cert.setIssuer(attrs);
+        cert.setExtensions([
+            { name: "basicConstraints", cA: true, critical: true, pathLenConstraint: 1 },
+            { name: "keyUsage", keyCertSign: true, digitalSignature: true, cRLSign: true, critical: true },
+            { name: "subjectKeyIdentifier" },
+            { name: "authorityKeyIdentifier", keyIdentifier: true },
+        ]);
+        cert.sign(keys.privateKey, node_forge_1.default.md.sha256.create());
+        const keyPem = node_forge_1.default.pki.privateKeyToPem(keys.privateKey);
+        const certPem = node_forge_1.default.pki.certificateToPem(cert);
+        fs.writeFileSync(this.caKeyPath, keyPem, { mode: 0o600 });
+        fs.writeFileSync(this.caCertPath, certPem);
+        this.authority = { key: keys.privateKey, cert, certPem };
+        return this.authority;
+    }
+}
+exports.MitmCertificateAuthority = MitmCertificateAuthority;
+/** @returns Default persistent CA directory under the user's home directory. */
+function defaultCaDir() {
+    return path.join(os.homedir(), ".claude-trace", "vibe-coding-proxy-ca");
+}
+/** Normalize hostnames before certificate generation and cache lookup. */
+function normalizeCertHost(hostname) {
+    return hostname.trim().replace(/^\[|\]$/g, "").toLowerCase();
+}
+/** Convert hostnames into filesystem-safe cache file stems. */
+function safeFileName(hostname) {
+    return hostname.replace(/[^a-zA-Z0-9.-]/g, "_");
+}
+/** Return true when a PEM certificate is already expired. */
+function isCertificateExpired(certPem, now = new Date()) {
+    const cert = node_forge_1.default.pki.certificateFromPem(certPem);
+    return cert.validity.notAfter.getTime() <= now.getTime();
+}
+/** Return true when a cached CA has the stricter MITM root extensions we expect. */
+function isAuthorityCertificateUsable(certPem) {
+    try {
+        const cert = node_forge_1.default.pki.certificateFromPem(certPem);
+        return (!isCertificateExpired(certPem) &&
+            hasExtension(cert, "basicConstraints") &&
+            hasExtension(cert, "keyUsage") &&
+            hasExtension(cert, "subjectKeyIdentifier") &&
+            hasExtension(cert, "authorityKeyIdentifier"));
+    }
+    catch {
+        return false;
+    }
+}
+/** Return true when a cached leaf certificate has SAN and chain-linking extensions. */
+function isLeafCertificateUsable(certPem) {
+    try {
+        const cert = node_forge_1.default.pki.certificateFromPem(certPem);
+        return (!isCertificateExpired(certPem) &&
+            hasExtension(cert, "basicConstraints") &&
+            hasExtension(cert, "keyUsage") &&
+            hasExtension(cert, "extKeyUsage") &&
+            hasExtension(cert, "subjectAltName") &&
+            hasExtension(cert, "subjectKeyIdentifier") &&
+            hasExtension(cert, "authorityKeyIdentifier"));
+    }
+    catch {
+        return false;
+    }
+}
+/** Check whether a parsed certificate contains an extension by name. */
+function hasExtension(cert, name) {
+    return Boolean(cert.getExtension({ name }));
+}
+/** Remove cached leaf certificates after the signing CA has been rotated. */
+function removeCachedLeafCertificates(caDir) {
+    for (const entry of fs.readdirSync(caDir)) {
+        if (entry === "ca.crt" || entry === "ca.key.pem") {
+            continue;
+        }
+        if (entry.endsWith(".crt.pem") || entry.endsWith(".key.pem")) {
+            fs.rmSync(path.join(caDir, entry), { force: true });
+        }
+    }
+}
+/** Build subjectAltName entries for DNS names and IP literals. */
+function buildSubjectAltNames(hostname) {
+    if (isIpAddress(hostname)) {
+        return [{ type: 7, ip: hostname }];
+    }
+    return [{ type: 2, value: hostname }];
+}
+/** @returns true when `hostname` is an IPv4 or IPv6 literal. */
+function isIpAddress(hostname) {
+    return /^[0-9.]+$/.test(hostname) || hostname.includes(":");
+}
+//# sourceMappingURL=mitm-cert.js.map

package/dist/intercept/mitm-cert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-cert.js","sourceRoot":"","sources":["../../src/intercept/mitm-cert.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4KH,oCAEC;AA5KD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,+CAAiC;AACjC,4DAA+B;AAoB/B;;GAEG;AACH,MAAa,wBAAwB;IAMpC;;OAEG;IACH,YAAY,QAAgB,YAAY,EAAE;QALlC,cAAS,GAA2F,IAAI,CAAC;QAMhH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,eAAe;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/C,OAAO;YACN,QAAQ,EAAE,IAAI,CAAC,UAAU;YACzB,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC1B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,QAAgB;QACrC,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAEjF,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,uBAAuB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5C,OAAO;oBACN,IAAI,EAAE,aAAa;oBACnB,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;iBACtC,CAAC;YACH,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAM,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9E,MAAM,KAAK,GAAG;YACb,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE;YAC7C,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE;SACxD,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,CAAC;YAClB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvD,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnF,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;YACzC;gBACC,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,oBAAoB,CAAC,cAAc,CAAC;aAC9C;YACD,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAChC;gBACC,IAAI,EAAE,wBAAwB;gBAC9B,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,QAAQ,EAAE;aACvE;SACD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG;YACZ,GAAG,EAAE,oBAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,IAAI,EAAE,oBAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC;SACtC,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4DAA4D;IACpD,qBAAqB;QAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;QAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,SAAS,GAAG;oBAChB,GAAG,EAAE,oBAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAA6B;oBACpE,IAAI,EAAE,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC3C,OAAO;iBACP,CAAC;gBACF,OAAO,IAAI,CAAC,SAAS,CAAC;YACvB,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAM,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG;YACb,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,4BAA4B,EAAE;YAC3D,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE;SACxD,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC;YAClB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE;YAC5E,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9F,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAChC,EAAE,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,oBAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,oBAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;CACD;AA5ID,4DA4IC;AAED,gFAAgF;AAChF,SAAgB,YAAY;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;AACzE,CAAC;AAED,0EAA0E;AAC1E,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,6DAA6D;AAC7D,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAY,IAAI,IAAI,EAAE;IACpE,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,oFAAoF;AACpF,SAAS,4BAA4B,CAAC,OAAe;IACpD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CACN,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAC9B,YAAY,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACtC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;YAC9B,YAAY,CAAC,IAAI,EAAE,sBAAsB,CAAC;YAC1C,YAAY,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,uFAAuF;AACvF,SAAS,uBAAuB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CACN,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAC9B,YAAY,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACtC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;YAC9B,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC;YACjC,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC;YACpC,YAAY,CAAC,IAAI,EAAE,sBAAsB,CAAC;YAC1C,YAAY,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,IAA2B,EAAE,IAAY;IAC9D,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,SAAS,4BAA4B,CAAC,KAAa;IAClD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAClD,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;AACF,CAAC;AAED,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,QAAgB;IAC7C,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,gEAAgE;AAChE,SAAS,WAAW,CAAC,QAAgB;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/intercept/proxy-log-writer.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @file proxy-log-writer.ts
+ * @description Shared JSONL/JSON/HTML logging for vibe-coding-proxy traffic.
+ *
+ * The forward proxy captures requests through a different protocol surface than
+ * the existing reverse proxy, but the viewer expects the same RawPair shape.
+ * This writer centralizes body decoding, sensitive header redaction, SSE parsing,
+ * and real-time HTML regeneration for the independent proxy service.
+ */
+import type { IncomingHttpHeaders } from "http";
+/** Runtime options for {@link ProxyLogWriter}. */
+export interface ProxyLogWriterConfig {
+    /** Directory for JSONL, JSON, and HTML log files. */
+    logDirectory?: string;
+    /** Base name for log files; defaults to a timestamped `log-...`. */
+    logBaseName?: string;
+    /** Include non-target traffic when the proxy asks to log metadata. */
+    includeAllRequests?: boolean;
+    /** Open the HTML report when the proxy stops. */
+    openBrowser?: boolean;
+    /** Log auth headers verbatim instead of redacting them. */
+    logSensitiveHeaders?: boolean;
+    /** Tool identifier embedded in report metadata. */
+    tool?: string;
+}
+/** Files maintained by {@link ProxyLogWriter}. */
+export interface ProxyLogPaths {
+    jsonl: string;
+    json: string;
+    html: string;
+}
+/** Captured HTTP exchange passed from the proxy core into the log writer. */
+export interface ProxyExchange {
+    method: string;
+    url: string;
+    requestHeaders: IncomingHttpHeaders;
+    requestBody: Buffer;
+    statusCode: number;
+    responseHeaders: IncomingHttpHeaders;
+    responseChunks: Buffer[];
+    requestTimestamp: number;
+    responseTimestamp: number;
+    forceLog?: boolean;
+}
+/**
+ * Persists forward-proxy traffic using the same artifact set as existing CLIs.
+ */
+export declare class ProxyLogWriter {
+    private readonly config;
+    private readonly paths;
+    private readonly htmlGenerator;
+    private readonly pairs;
+    /** @param config - Log location, redaction, and report options. */
+    constructor(config?: ProxyLogWriterConfig);
+    /** @returns Absolute paths for JSONL, JSON, and HTML artifacts. */
+    getPaths(): ProxyLogPaths;
+    /**
+     * Write a completed request/response exchange when it matches logging policy.
+     * @param exchange - Buffered HTTP request and response data.
+     */
+    logExchange(exchange: ProxyExchange): Promise<void>;
+    /**
+     * Write CONNECT tunnel metadata when body logging is unavailable.
+     * @param authority - CONNECT target such as `api.example.com:443`.
+     * @param note - Reason this is metadata-only.
+     */
+    logConnectMetadata(authority: string, note: string): Promise<void>;
+    /** Print summary and optionally open the generated HTML report. */
+    stop(): void;
+    /** Redact sensitive headers unless explicitly disabled. */
+    private processHeaders;
+    /** Append one pair to JSONL, rewrite JSON, and regenerate HTML. */
+    private writePair;
+    /** Open an HTML file in the platform default browser. */
+    private openHtmlInBrowser;
+}
+//# sourceMappingURL=proxy-log-writer.d.ts.map

package/dist/intercept/proxy-log-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-log-writer.d.ts","sourceRoot":"","sources":["../../src/intercept/proxy-log-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAgBhD,kDAAkD;AAClD,MAAM,WAAW,oBAAoB;IACpC,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iDAAiD;IACjD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,mBAAmB,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,mBAAmB,CAAC;IACrC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAKD;;GAEG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmE;IAC1F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IAEvC,mEAAmE;gBACvD,MAAM,GAAE,oBAAyB;IA4B7C,mEAAmE;IACnE,QAAQ,IAAI,aAAa;IAQzB;;;OAGG;IACG,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCzD;;;;OAIG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBxE,mEAAmE;IACnE,IAAI,IAAI,IAAI;IAOZ,2DAA2D;IAC3D,OAAO,CAAC,cAAc;IAItB,mEAAmE;YACrD,SAAS;IAWvB,yDAAyD;IACzD,OAAO,CAAC,iBAAiB;CAazB"}

package/dist/intercept/proxy-log-writer.js

@@ -0,0 +1,323 @@
+"use strict";
+/**
+ * @file proxy-log-writer.ts
+ * @description Shared JSONL/JSON/HTML logging for vibe-coding-proxy traffic.
+ *
+ * The forward proxy captures requests through a different protocol surface than
+ * the existing reverse proxy, but the viewer expects the same RawPair shape.
+ * This writer centralizes body decoding, sensitive header redaction, SSE parsing,
+ * and real-time HTML regeneration for the independent proxy service.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProxyLogWriter = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const zlib = __importStar(require("zlib"));
+const child_process_1 = require("child_process");
+const openai_adapter_1 = require("../adapt/openai-adapter");
+const api_format_1 = require("../adapt/api-format");
+const html_generator_1 = require("../report/html-generator");
+const header_redaction_1 = require("./header-redaction");
+const shared_conversation_processor_1 = require("../report/shared-conversation-processor");
+const cli_common_1 = require("../cli/cli-common");
+/**
+ * Persists forward-proxy traffic using the same artifact set as existing CLIs.
+ */
+class ProxyLogWriter {
+    /** @param config - Log location, redaction, and report options. */
+    constructor(config = {}) {
+        this.htmlGenerator = new html_generator_1.HTMLGenerator();
+        this.pairs = [];
+        this.config = {
+            logDirectory: config.logDirectory || ".vibe-coding-proxy",
+            logBaseName: config.logBaseName || "",
+            includeAllRequests: config.includeAllRequests || false,
+            openBrowser: config.openBrowser || false,
+            logSensitiveHeaders: config.logSensitiveHeaders || false,
+            tool: config.tool,
+        };
+        if (!fs.existsSync(this.config.logDirectory)) {
+            fs.mkdirSync(this.config.logDirectory, { recursive: true });
+        }
+        const fileBaseName = this.config.logBaseName ||
+            `log-${new Date().toISOString().replace(/[:.]/g, "-").replace("T", "-").slice(0, -5)}`;
+        this.paths = {
+            jsonl: path.join(this.config.logDirectory, `${fileBaseName}.jsonl`),
+            json: path.join(this.config.logDirectory, `${fileBaseName}.json`),
+            html: path.join(this.config.logDirectory, `${fileBaseName}.html`),
+        };
+        fs.writeFileSync(this.paths.jsonl, "");
+        fs.writeFileSync(this.paths.json, "[]");
+    }
+    /** @returns Absolute paths for JSONL, JSON, and HTML artifacts. */
+    getPaths() {
+        return {
+            jsonl: path.resolve(this.paths.jsonl),
+            json: path.resolve(this.paths.json),
+            html: path.resolve(this.paths.html),
+        };
+    }
+    /**
+     * Write a completed request/response exchange when it matches logging policy.
+     * @param exchange - Buffered HTTP request and response data.
+     */
+    async logExchange(exchange) {
+        if (!exchange.forceLog && !this.config.includeAllRequests) {
+            return;
+        }
+        try {
+            const requestBody = parseRequestBodyForLog(exchange.requestHeaders, exchange.requestBody);
+            const responseBodyText = decodeBodyText(exchange.responseHeaders, Buffer.concat(exchange.responseChunks));
+            const apiFormat = resolveApiFormat(exchange.url, requestBody);
+            const parsedResponse = parseResponseBody(exchange.responseHeaders, responseBodyText, apiFormat, requestBody);
+            const pair = {
+                request: {
+                    timestamp: exchange.requestTimestamp / 1000,
+                    method: exchange.method,
+                    url: exchange.url,
+                    headers: this.processHeaders(exchange.requestHeaders),
+                    body: requestBody,
+                },
+                response: {
+                    timestamp: exchange.responseTimestamp / 1000,
+                    status_code: exchange.statusCode,
+                    headers: this.processHeaders(exchange.responseHeaders),
+                    api_format: apiFormat !== "unknown" ? apiFormat : undefined,
+                    ...parsedResponse,
+                },
+                logged_at: new Date().toISOString(),
+            };
+            await this.writePair(pair);
+        }
+        catch (error) {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: failed to log exchange: ${error}`, this.config.logDirectory);
+        }
+    }
+    /**
+     * Write CONNECT tunnel metadata when body logging is unavailable.
+     * @param authority - CONNECT target such as `api.example.com:443`.
+     * @param note - Reason this is metadata-only.
+     */
+    async logConnectMetadata(authority, note) {
+        if (!this.config.includeAllRequests) {
+            return;
+        }
+        const now = Date.now() / 1000;
+        await this.writePair({
+            request: {
+                timestamp: now,
+                method: "CONNECT",
+                url: authority,
+                headers: {},
+                body: null,
+            },
+            response: {
+                timestamp: now,
+                status_code: 200,
+                headers: {},
+                body: { tunnel: true },
+            },
+            logged_at: new Date().toISOString(),
+            note,
+        });
+    }
+    /** Print summary and optionally open the generated HTML report. */
+    stop() {
+        console.error(`Logged ${this.pairs.length} request/response pairs`);
+        if (this.config.openBrowser && fs.existsSync(this.paths.html)) {
+            this.openHtmlInBrowser(this.paths.html);
+        }
+    }
+    /** Redact sensitive headers unless explicitly disabled. */
+    processHeaders(headers) {
+        return (0, header_redaction_1.processHeaders)(headers, this.config.logSensitiveHeaders);
+    }
+    /** Append one pair to JSONL, rewrite JSON, and regenerate HTML. */
+    async writePair(pair) {
+        this.pairs.push(pair);
+        fs.appendFileSync(this.paths.jsonl, JSON.stringify(pair) + "\n");
+        fs.writeFileSync(this.paths.json, JSON.stringify(this.pairs, null, 2));
+        await this.htmlGenerator.generateHTML(this.pairs, this.paths.html, {
+            timestamp: new Date().toISOString().replace("T", " ").slice(0, -5),
+            includeAllRequests: this.config.includeAllRequests,
+            tool: this.config.tool,
+        });
+    }
+    /** Open an HTML file in the platform default browser. */
+    openHtmlInBrowser(htmlFile) {
+        try {
+            if (process.platform === "win32") {
+                (0, child_process_1.spawn)("cmd", ["/c", "start", "", htmlFile], { detached: true, stdio: "ignore" }).unref();
+            }
+            else {
+                const cmd = process.platform === "darwin" ? "open" : "xdg-open";
+                (0, child_process_1.spawn)(cmd, [htmlFile], { detached: true, stdio: "ignore" }).unref();
+            }
+            console.error(`Opening ${htmlFile} in browser`);
+        }
+        catch (error) {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: failed to open HTML report: ${error}`, this.config.logDirectory);
+        }
+    }
+}
+exports.ProxyLogWriter = ProxyLogWriter;
+/** Decode and decompress a body buffer using the corresponding headers. */
+function decodeBodyText(headers, buffer) {
+    if (!buffer.length) {
+        return "";
+    }
+    const encoding = String(headers["content-encoding"] || "").toLowerCase();
+    try {
+        if (encoding === "gzip")
+            return zlib.gunzipSync(buffer).toString("utf-8");
+        if (encoding === "br")
+            return zlib.brotliDecompressSync(buffer).toString("utf-8");
+        if (encoding === "deflate")
+            return zlib.inflateSync(buffer).toString("utf-8");
+        if (encoding === "zstd") {
+            const zstdDecompressSync = zlib.zstdDecompressSync;
+            if (zstdDecompressSync)
+                return zstdDecompressSync(buffer).toString("utf-8");
+        }
+    }
+    catch {
+        return buffer.toString("utf-8");
+    }
+    return buffer.toString("utf-8");
+}
+/** Parse a request body as JSON when possible, otherwise return raw text. */
+function parseRequestBodyForLog(headers, buffer) {
+    if (!buffer.length) {
+        return null;
+    }
+    const text = decodeBodyText(headers, buffer);
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+/** Infer API format from URL and body shape. */
+function resolveApiFormat(url, requestBody) {
+    const fromUrl = (0, api_format_1.inferApiFormatFromUrl)(url);
+    if (fromUrl !== "unknown") {
+        return fromUrl;
+    }
+    return (0, api_format_1.inferApiFormatFromBody)(requestBody);
+}
+/** Parse response body into viewer-friendly fields. */
+function parseResponseBody(headers, responseBody, apiFormat, requestBody) {
+    const contentType = String(headers["content-type"] || "");
+    const model = requestBody && typeof requestBody === "object" && "model" in requestBody
+        ? String(requestBody.model)
+        : "unknown";
+    try {
+        if (contentType.includes("application/json")) {
+            const parsed = JSON.parse(responseBody);
+            if (parsed && typeof parsed === "object" && "error" in parsed) {
+                return { body: parsed };
+            }
+            if (apiFormat === "openai" || (parsed && typeof parsed === "object" && "choices" in parsed)) {
+                return { body: (0, openai_adapter_1.parseOpenAIChatCompletionBody)(parsed, model) };
+            }
+            if (apiFormat === "openai-responses" || (parsed && typeof parsed === "object" && "output" in parsed)) {
+                return { body: (0, openai_adapter_1.parseOpenAIResponsesBody)(parsed, model) };
+            }
+            return { body: parsed };
+        }
+        if (contentType.includes("text/event-stream")) {
+            const events = parseSSEEvents(responseBody);
+            if (apiFormat === "openai") {
+                try {
+                    const completion = (0, openai_adapter_1.buildOpenAIChatCompletionFromSSE)(responseBody, model);
+                    return { body: (0, openai_adapter_1.parseOpenAIChatCompletionBody)(completion, model), events };
+                }
+                catch {
+                    return { body_raw: responseBody, events };
+                }
+            }
+            if (apiFormat === "openai-responses") {
+                try {
+                    const responsesBody = (0, openai_adapter_1.buildOpenAIResponsesFromSSE)(responseBody, model);
+                    return { body: (0, openai_adapter_1.parseOpenAIResponsesBody)(responsesBody, model), events };
+                }
+                catch {
+                    return { body_raw: responseBody, events };
+                }
+            }
+            try {
+                const message = new shared_conversation_processor_1.SharedConversationProcessor().parseStreamingResponse(responseBody);
+                return { body: message, events };
+            }
+            catch {
+                return { body_raw: responseBody, events };
+            }
+        }
+        return { body_raw: responseBody };
+    }
+    catch {
+        return { body_raw: responseBody };
+    }
+}
+/** Parse Server-Sent Events lines into structured event records. */
+function parseSSEEvents(body) {
+    const events = [];
+    let currentEvent = "";
+    for (const line of body.split("\n")) {
+        if (line.startsWith("event: ")) {
+            currentEvent = line.substring(7).trim();
+        }
+        else if (line.startsWith("data: ")) {
+            const data = line.substring(6).trim();
+            if (data === "[DONE]")
+                break;
+            try {
+                const parsed = JSON.parse(data);
+                const eventType = currentEvent ||
+                    (parsed && typeof parsed === "object" && "type" in parsed
+                        ? String(parsed.type)
+                        : "unknown");
+                events.push({ event: eventType, data: parsed, timestamp: new Date().toISOString() });
+            }
+            catch {
+                // Keep logging robust when one SSE line is malformed.
+            }
+        }
+    }
+    return events;
+}
+//# sourceMappingURL=proxy-log-writer.js.map